CVE-2010-0551: HTTP authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers to read authentication headers of other users via a large…

PriorityP424medium5CVSS 2.0

AVNACLAuNCPINAN

EPSS

1.46%

70.4th percentile

HTTP authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers to read authentication headers of other users via a large request with an incorrect authentication attempt, which includes sensitive memory in the response. NOTE: this is referred to as a "memory leak" by some sources, but is better characterized as "memory disclosure."

Affected

2 ranges

Vendor	Product	Version range	Fixed in
geopp	geo_+_+_gncaster	<= 1.4.0.7	—
geopp	geo_+_+_gncaster	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.